SFS 3 / SF B

Back to SFS 3

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are directory services maintaining accurate user account status reflecting current authorization throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence showing directory services accurately reflect active/deactivated accounts per authorization decisions

Assessment criterion and evidence

Actor: Organization's identity management system. Scope: Central directory services managing user accounts and access permissions. Evidence period: Review period. Required evidence: Synchronization process documentation between HR systems and directory services; Audit logs demonstrating timely updates to directory entries. Negative criterion: Directory entries showing active accounts for terminated employees or unauthorized access privileges. Missing evidence: Pending assessment when directory synchronization processes or audit logs are unavailable

View the JSON record (opens in a new tab).

Assessment result: unset.